PT-2024-19943 · Hcl · Hcl Domino

Name of the Vulnerable Software and Affected Versions: HCL Domino affected versions not specified Description: A security issue in HCL Domino could allow disclosure of sensitive configuration information. A remote unauthenticated attacker could exploit this issue to obtain information to launch...

CVE-2024-23588

HCL Nomad server on Domino fails to properly handle users configured with limited Domino access resulting in a possible denial of service vulnerability...

CVE-2024-23588 A denial of service vulnerability affects HCL Nomad server on Domino

HCL Nomad server on Domino fails to properly handle users configured with limited Domino access resulting in a possible denial of service vulnerability...

CVE-2024-23588 A denial of service vulnerability affects HCL Nomad server on Domino

HCL Nomad server on Domino fails to properly handle users configured with limited Domino access resulting in a possible denial of service vulnerability...

CVE-2024-23588

CVE-2024-23588 affects HCL Nomad server on Domino. The issue arises from the server failing to properly handle users configured with limited Domino access, which can lead to a denial of service (availability impact HIGH). The CVSS analysis indicates a network attack vector with low to moderate co...

HCL Nomad Security Breach

HCL Nomad is an application for using and managing the Domino application development platform in mobile devices from HCL Corporation, USA. A security vulnerability exists in HCL Nomad that stems from a possible denial-of-service vulnerability in which the HCL Nomad server does not properly handl...

CVE-2024-30135

HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken...

CVE-2024-30135 Sensitive Information Disclosure vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX is potentially impacted by disclosure of sensitive information in the mobile application when a snapshot is taken...

CVE-2024-30111

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-30110

HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which can cause the system to behave in unexpected ways...

CVE-2024-30111

The CVE-2024-30111 entry concerns HCL DRYiCE AEX mobile app with a Missing Root Detection vulnerability. Connected sources (EUVD-2024-28047, NVD/NVD-like records, CVE list) indicate the vulnerability affects DRYiCE AEX v10 and is tied to rooted-device bypass, enabling unauthorized access on roote...

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-30111 Missing Root Detection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by Missing Root Detection vulnerability in the mobile application. The mobile app can be installed in the rooted device due to which malicious users can gain unauthorized access to the rooted devices, compromising security and potentially leading to data breache...

CVE-2024-30110 Lack of input validation vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which can cause the system to behave in unexpected ways...

CVE-2024-30110

CVE-2024-30110 affects HCL DRYiCE AEX, with a lack of input validation in the web application component. The CVE is tied to DRYiCE AEX v10, indicating the affected version. Documented impact indicates high confidentiality, integrity, and availability concerns per CVSS 3.1 metrics, but the provide...

CVE-2024-30110 Lack of input validation vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX product is impacted by lack of input validation vulnerability in a particular web application. A malicious script can be injected into a system which can cause the system to behave in unexpected ways...

CVE-2024-30109

HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended...

CVE-2024-30109

HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended...

CVE-2024-30109 Lack of Clickjacking Protection vulnerability affects DRYiCE AEX v10

HCL DRYiCE AEX is impacted by a lack of clickjacking protection in the AEX web application. An attacker can use multiple transparent or opaque layers to trick a user into clicking on a button or link on another page than the one intended...

CVE-2024-30112

HCL Connections is vulnerable to a cross-site scripting attack where an attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user which leads to executing malicious script code. This may let the attacker steal cookie-based authentication credentials...